Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a3a2f33322d3335203d3e20323637313839.roa
File:                     323830343a343938383a3a2f33322d3335203d3e20323637313839.roa (raw, json)
Hash identifier:          6rctlSvabs0Gy8IfAkdnYQsQOmPU8Q2IznMSDjBhTKs=
Subject key identifier:   DB:DE:FA:11:F4:E5:FF:D1:66:D9:44:0B:D7:60:33:6E:C7:89:94:6D
Certificate issuer:       /CN=6B8F2D7352FA1E714663C1285A46D4C8FD4E7430
Certificate serial:       5959594E68EA0B0D9342DBF90530117A587EE927
Authority key identifier: 6B:8F:2D:73:52:FA:1E:71:46:63:C1:28:5A:46:D4:C8:FD:4E:74:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a3a2f33322d3335203d3e20323637313839.roa
Signing time:             Thu 07 Mar 2024 18:39:32 +0000
ROA not before:           Thu 07 Mar 2024 18:34:32 +0000
ROA not after:            Thu 06 Mar 2025 18:39:32 +0000
asID:                     267189
IP address blocks:        2804:4988::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:59:59:4e:68:ea:0b:0d:93:42:db:f9:05:30:11:7a:58:7e:e9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B8F2D7352FA1E714663C1285A46D4C8FD4E7430
        Validity
            Not Before: Mar  7 18:34:32 2024 GMT
            Not After : Mar  6 18:39:32 2025 GMT
        Subject: CN=DBDEFA11F4E5FFD166D9440BD760336EC789946D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:e9:99:47:26:1e:7f:dd:21:aa:ff:6e:0b:
                    e1:e6:2e:73:4c:75:ff:c2:45:aa:f0:c2:76:dd:b2:
                    d9:0f:e3:5a:f8:22:0a:72:a3:6b:ae:67:24:0b:ab:
                    17:e5:c0:cd:94:55:b4:81:05:0e:a0:0c:5c:dc:07:
                    9f:5f:93:58:65:40:4e:34:4f:e9:c0:b8:78:2f:0e:
                    d3:15:08:01:ec:92:ea:30:c4:3c:e4:68:42:24:82:
                    c1:d7:b2:6e:c5:17:ed:77:5b:06:9d:2d:c8:46:26:
                    0f:c5:f9:a1:47:02:ef:93:7c:97:79:ce:2a:cf:e9:
                    50:32:7d:72:9d:4a:f3:19:5b:f8:cd:a3:ce:f8:92:
                    5a:67:e8:aa:18:b1:f8:47:ac:72:a2:5b:ab:1d:2a:
                    a2:c3:7c:0f:b9:27:b6:16:42:3c:b6:b1:e0:33:77:
                    68:3c:a0:56:f5:21:d3:97:51:eb:b8:60:2c:e0:b7:
                    bd:b3:11:5e:b2:78:e7:01:2b:c7:cf:a0:46:d9:34:
                    3a:c5:24:88:0b:4a:84:f1:83:ff:57:f9:03:7b:cd:
                    eb:fc:9a:53:30:bf:60:77:dd:e2:d6:44:3b:4b:00:
                    90:49:55:87:34:d8:de:10:7b:86:4e:d3:20:81:16:
                    ed:86:ea:08:59:29:27:4f:ae:9b:78:56:d0:7a:4c:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DE:FA:11:F4:E5:FF:D1:66:D9:44:0B:D7:60:33:6E:C7:89:94:6D
            X509v3 Authority Key Identifier:
                keyid:6B:8F:2D:73:52:FA:1E:71:46:63:C1:28:5A:46:D4:C8:FD:4E:74:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a3a2f33322d3335203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4988::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:db:cb:ee:78:d1:0d:cb:96:88:9f:20:c9:f9:c7:8a:38:
         dd:58:04:f3:68:1b:2e:36:55:fc:b3:4c:a1:62:bd:de:6e:55:
         1b:db:7f:01:0b:ea:27:1c:23:3c:da:32:9a:50:29:22:76:0b:
         84:ce:31:a2:c5:29:25:99:7f:10:8a:bb:26:de:f3:1b:ed:6f:
         55:d1:30:76:cd:2f:27:09:4d:c1:2d:c1:5a:5b:30:bc:55:19:
         77:b3:d5:98:70:b4:6b:00:6e:e2:ed:d3:10:2f:a9:a6:f0:e7:
         fd:5f:db:f9:b6:86:31:80:65:99:3f:f1:62:e6:ca:4b:6b:f1:
         f3:8e:cc:6c:6c:71:23:d6:40:73:1b:76:4f:c6:ea:75:06:7a:
         d8:bd:ab:9c:72:47:f3:3e:d4:c0:8c:6f:d7:aa:bd:98:c3:f7:
         fe:80:02:1e:09:fd:79:55:ac:41:c2:b2:cc:dc:e4:d8:82:28:
         f2:a7:66:19:2b:ba:2b:c6:0d:75:9d:79:cd:bf:fb:7a:51:71:
         2e:0e:1a:83:2d:14:29:ab:dc:65:0c:e8:65:52:dd:80:32:20:
         a6:88:cc:b5:d1:4e:82:39:2c:cc:5b:8c:6e:77:58:16:48:fc:
         eb:25:3c:8b:2a:43:7e:eb:5b:e3:ba:98:94:b9:dd:11:dc:a6:
         c2:6a:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:19 2025 by rpki-client